openplan-auto — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited openplan-auto (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this as the orchestration layer for unattended or low-interaction workflows.
Auto mode can gather evidence, classify, review, summarize, and prepare proposals. It cannot make human-owned decisions, accept risk, approve changes, or silently mutate durable goal/intent.
Default chain:
core -> operate -> (align/research if needed) -> action/test/review/garden -> record proposal -> handoff -> html briefUse only the stages needed.
| Stage | Skill | Auto Can Do | Must Stop For |
|---|---|---|---|
| Principles | $openplan-core | Apply invariants | Conflicting human/platform instruction |
| Startup | $openplan-operate | Load minimal context, choose mode | Destructive or broad action |
| Alignment | $openplan-align | Infer safe route, ask limited questions only as the human-facing coordinator | Scope/architecture/risk decision |
| Research | $openplan-research | Gather bounded evidence | Turning findings into decisions |
| Test | $openplan-test | Choose proportional checks, prove regression coverage, report skipped checks | Approval, merge/release, or risk acceptance |
| Review | $openplan-review | Read-only findings | Approval or fixes |
| Garden | $openplan-garden | Semantic doc report | Durable doc rewrite |
| Record | $openplan-record | Propose memory/docs updates | Ambiguous durable goal/intent update |
| Docs Init | $openplan-docs-init | Initialize governed document generation | Durable governance/design decision |
| Handoff | $openplan-handoff | Snapshot state | None, unless it would assert unverified facts |
| HTML | $openplan-html-brief | Temporary human frontend | Persisting or committing HTML |
INIT: read request and local instructions.CLASSIFY: choose primary mode and surfaces.EVIDENCE: collect minimal durable evidence.DECIDE_ROUTE: bounded action, align, research, test, docs-init, review, garden, record proposal, handoff, HTML brief, or block.EXECUTE_SAFE: perform read-only work or explicitly authorized writes inside scope.VERIFY: run the proportional test, review, garden, or evidence check for the artifact touched.RECORD: propose durable memory/docs updates only when warranted.HANDOFF: write or emit a minimal continuation snapshot when work is long-running, cross-agent, blocked, or risky.REPORT: summarize scope, evidence, actions, decisions needed, next safe action, and residual risk.STOP: stop at the human decision boundary.An auto run is closed only when every routed branch ends in one of these states:
completed in scope: evidence and checks are reported, with no approval claim;blocked: the missing artifact, decision, or authority is named;human decision required: options and evidence are prepared, but no decision is made;handoff emitted: another agent/session can continue from a minimal snapshot;disposable brief emitted: HTML is clearly temporary and points back to durable artifacts.Closure rules:
$openplan-garden when in scope; otherwise report the skipped check, impact, and next safe action.$openplan-record as a proposal layer.$openplan-research before design or execution.$openplan-docs-init before writing durable docs.$openplan-test.Stop and report instead of continuing when the next step requires:
Report BLOCKED when progress requires a missing artifact, unavailable evidence source, unsafe/out-of-scope check, or inaccessible authority source.
Report HUMAN_DECISION_REQUIRED when progress requires a human choice, risk acceptance, scope/architecture decision, approval, bypass, or durable intent change.
Allowed by default when safe:
/tmp.At the end of an auto or YOLO-style run, report:
Mode:
Scope:
Evidence collected:
Actions performed:
Findings/proposals:
Test evidence:
Checks run:
Checks skipped:
Human decisions required:
Blocked items:
Next safe action:
Handoff snapshot:
Temporary HTML brief:
Residual risk:references/orchestration.md: detailed flow.references/stop-rules.md: stop conditions.assets/claude-code-command.md: Claude Code command/prompt seed.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.